This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer File: 2c-g5Eir4w0msGZanClNKcl7fr8.cer (raw, json) Hash identifier: BoTbLJ5vpaqzYxGFSdLXFAErvI7pR6L62bUcKgeS5AM= Subject key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E916549395BBC48B4E95A71E7DBB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208987 IP: 45.8.168.0/22 IP: 2a0e:9200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e9:16:54:93:95:bb:c4:8b:4e:95:a7:1e:7d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:78:8f:ee:25:9b:0d:54:a0:80:0e:c3:6b: 6a:e7:0f:d1:20:bd:aa:fc:76:cc:47:ae:44:1b:36: 71:49:7b:96:25:fa:1b:53:71:ec:8f:b8:c8:20:76: b7:70:58:0c:2f:2c:c2:54:61:d2:dd:34:fa:86:bb: c0:58:3d:3e:16:26:b6:d1:26:eb:18:09:d0:9d:c6: 73:25:c8:dc:ba:a3:e2:37:e7:b3:cb:22:0c:bd:48: 3d:68:e0:74:23:63:48:c5:e2:30:f4:60:48:6d:de: 0e:2a:0b:0c:3b:97:fb:40:74:7d:f9:03:47:b8:4f: 72:fa:e8:fe:24:c3:5b:ad:97:01:a4:0b:d2:71:01: 29:5d:60:91:5d:ae:83:00:f0:6f:2c:dd:6b:e5:ab: cd:4e:6a:c8:bc:8c:af:18:32:63:e5:f9:ea:7a:4a: 92:f1:62:89:a3:f2:63:bd:94:9e:ac:bc:84:ea:3c: 94:72:7e:8f:b2:1f:3c:d3:74:97:a5:12:60:19:18: 32:a2:03:c9:65:86:5b:07:4c:8c:77:f4:89:6a:3f: 08:87:c8:fe:4f:90:e3:6f:c3:c0:45:dc:13:c7:33: 1b:80:c2:ff:30:02:d7:c1:1f:2e:ce:b1:86:70:79: 30:53:0b:6d:1a:7c:5a:47:41:88:6c:cc:9a:9a:5a: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.168.0/22 IPv6: 2a0e:9200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208987 Signature Algorithm: sha256WithRSAEncryption 6b:f3:7a:f9:33:83:4b:1f:d7:85:7d:32:0d:c2:10:d7:6e:a6: ba:2f:b3:48:f4:e3:3f:59:b2:95:e8:07:b5:f0:f4:2b:d9:b2: df:52:57:24:23:f4:44:c0:3c:67:a8:13:9c:a2:e8:82:e9:26: 36:24:d0:98:fd:b6:82:f4:9a:fd:ae:8b:3c:64:f5:07:3e:44: 1a:d3:7f:d9:84:e6:eb:a2:fc:35:33:7a:b4:9f:ba:8d:c0:87: c1:42:1b:f8:78:25:e0:a3:b0:19:b2:9c:49:11:6f:b9:03:04: c4:08:e7:e0:80:09:6e:f8:04:c3:2b:b2:0d:15:a4:77:3e:d5: a9:56:b8:f9:8a:d7:f8:48:cf:e3:e4:5b:17:6a:4a:15:87:c8: 9d:35:45:36:95:84:ee:6c:02:d8:02:85:c8:eb:11:0f:3a:b7: f7:ca:e1:eb:3b:ed:0e:24:c4:6e:70:e0:de:93:36:d3:6d:4c: fa:d9:b1:be:79:0e:06:5e:51:64:14:03:0f:2e:17:09:d2:59: 01:aa:98:40:dc:ce:89:83:9b:29:15:c2:8e:8a:ec:9a:0a:49: 3a:3b:af:18:17:90:db:62:d6:61:31:05:49:24:e3:15:9b:63: 35:47:87:b9:a9:3a:4b:37:2b:11:a6:82:b4:90:60:7a:49:54: 3e:70:c2:7a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OOkWVJOVu8SLTpWnHn27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWNmYTBlNDQ4YWJlMzBkMjZiMDY2NWE5YzI5NGQyOWM5N2I3ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnZ4j+4lmw1UoIAOw2tq5w/RIL2q /HbMR65EGzZxSXuWJfobU3Hsj7jIIHa3cFgMLyzCVGHS3TT6hrvAWD0+Fia20Sbr GAnQncZzJcjcuqPiN+ezyyIMvUg9aOB0I2NIxeIw9GBIbd4OKgsMO5f7QHR9+QNH uE9y+uj+JMNbrZcBpAvScQEpXWCRXa6DAPBvLN1r5avNTmrIvIyvGDJj5fnqekqS 8WKJo/JjvZSerLyE6jyUcn6Psh8803SXpRJgGRgyogPJZYZbB0yMd/SJaj8Ih8j+ T5Djb8PARdwTxzMbgML/MALXwR8uzrGGcHkwUwttGnxaR0GIbMyamlplmQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNnPoORIq+MNJrBmWpwpTSnJe36/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2EwMTcw NS03YTA2LTRiMDQtODY0Mi01ZGZkZDI1OWRkMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYTAxNzA1 LTdhMDYtNGIwNC04NjQyLTVkZmRkMjU5ZGQxYi8xLzJjLWc1RWlyNHcwbXNHWmFu Q2xOS2NsN2ZyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQioMA0EAgACMAcDBQMqDpIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwWzANBgkqhkiG9w0BAQsFAAOCAQEAa/N6+TODSx/X hX0yDcIQ126mui+zSPTjP1mylegHtfD0K9my31JXJCP0RMA8Z6gTnKLogukmNiTQ mP22gvSa/a6LPGT1Bz5EGtN/2YTm66L8NTN6tJ+6jcCHwUIb+Hgl4KOwGbKcSRFv uQMExAjn4IAJbvgEwyuyDRWkdz7VqVa4+YrX+EjP4+RbF2pKFYfInTVFNpWE7mwC 2AKFyOsRDzq398rh6zvtDiTEbnDg3pM2021M+tmxvnkOBl5RZBQDDy4XCdJZAaqY QNzOiYObKRXCjorsmgpJOjuvGBeQ22LWYTEFSSTjFZtjNUeHuak6SzcrEaaCtJBg eklUPnDCeg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:06 2026 by rpki-client